Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z7YwgnCPGCn1M0G1V2LSIO1o4Mk.cer
File: z7YwgnCPGCn1M0G1V2LSIO1o4Mk.cer (raw, json)
Hash identifier: nCOnLIAPvV1GSlehTceN1B8OeZOZwZPsBO/jW5xMUNw=
Subject key identifier: CF:B6:30:82:70:8F:18:29:F5:33:41:B5:57:62:D2:20:ED:68:E0:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01875245B18BFC8690078B97D58AEF6675C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/35ea7f-3a87-4d2c-877b-3fba33480c66/1/z7YwgnCPGCn1M0G1V2LSIO1o4Mk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/35ea7f-3a87-4d2c-877b-3fba33480c66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Apr 2023 16:35:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 209658
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:45:b1:8b:fc:86:90:07:8b:97:d5:8a:ef:66:75:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 5 16:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfb63082708f1829f53341b55762d220ed68e0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:58:9a:9a:71:2f:f2:f8:f4:db:b9:98:4e:
2c:7a:f9:04:ff:91:2b:5c:6f:e0:d7:50:a1:7e:8c:
9e:94:02:70:37:e3:bf:2e:99:c5:85:da:85:62:d8:
7a:e0:e9:93:19:3c:50:18:62:e8:c3:5b:79:54:22:
f9:a8:cb:dc:1c:90:3b:4d:8f:28:66:f1:59:5f:64:
1e:1f:f8:8c:bc:58:8a:c5:a7:cd:77:08:2f:8e:38:
78:99:e2:cd:c5:be:f0:59:74:3f:6c:26:61:52:0c:
bc:ad:74:c9:e7:56:c2:a0:a0:87:1b:5b:39:ef:0a:
db:33:9e:f9:5e:b6:78:69:50:c6:d9:3a:7e:5d:8d:
90:42:b8:dd:ac:fd:d5:00:79:48:ba:8e:1a:e9:51:
4a:40:d9:ef:bf:93:5c:a0:63:63:71:cc:77:ba:e3:
ad:3d:c0:a3:20:a3:61:48:35:dc:2f:94:31:ba:7a:
9c:22:3b:43:24:19:ea:0c:96:b3:4c:a8:6a:d0:ec:
4c:c3:69:47:4f:0f:0b:42:50:01:d1:75:7f:d0:69:
4d:a4:82:8c:a0:c1:7a:5f:a7:a2:be:12:5c:8e:03:
cb:47:e4:cf:b3:b2:97:28:47:aa:8f:c3:78:22:a9:
7f:86:16:b9:e1:fb:50:f7:a2:77:3f:c7:ef:bd:d6:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B6:30:82:70:8F:18:29:F5:33:41:B5:57:62:D2:20:ED:68:E0:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/35ea7f-3a87-4d2c-877b-3fba33480c66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/35ea7f-3a87-4d2c-877b-3fba33480c66/1/z7YwgnCPGCn1M0G1V2LSIO1o4Mk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209658
Signature Algorithm: sha256WithRSAEncryption
0a:98:2d:f0:53:78:4a:c7:be:84:c7:5d:57:7d:69:e6:b9:fa:
1b:02:b2:49:10:f7:1d:c6:92:d0:3b:da:4d:c8:54:4b:91:73:
b7:0e:9d:b1:58:7f:00:1b:c2:b9:3f:ba:f4:73:6d:ef:ce:f2:
81:8b:63:4b:11:bb:2a:db:15:d0:71:e3:6b:d8:6b:3e:d8:a5:
bd:51:0d:8c:f6:b5:4e:f7:2b:83:71:58:40:16:58:f8:2b:65:
e3:66:29:4e:f2:a4:20:d0:c1:09:95:5f:a7:be:2b:ac:aa:61:
17:0a:17:05:db:99:01:3c:77:02:bd:2c:86:34:8f:7e:56:e9:
b1:78:82:af:c0:cf:14:0b:60:05:49:f0:9b:8b:9f:ac:29:52:
17:29:b6:06:6e:5a:60:20:11:15:84:74:30:27:e1:51:b5:7c:
73:94:f1:bf:f1:03:59:e9:0b:d5:05:dd:a4:99:3a:4c:f3:b7:
b3:b2:b8:9c:87:ca:63:37:0c:44:46:40:b3:27:21:5f:50:d9:
dc:a4:05:ee:b7:8f:92:7e:18:6b:c9:05:b0:28:8c:5d:13:6a:
00:f9:ad:ae:dd:f2:3c:fa:21:9c:25:a1:31:1b:bc:02:02:e8:
e1:79:d7:f7:91:3a:57:82:c9:e9:66:42:53:e4:08:27:b5:9c:
38:92:7c:1d
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYdSRbGL/IaQB4uX1YrvZnXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNDA1MTYzNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmI2MzA4MjcwOGYxODI5ZjUzMzQxYjU1NzYyZDIyMGVkNjhlMGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqglYmppxL/L49Nu5mE4sevkE/5Er
XG/g11ChfoyelAJwN+O/LpnFhdqFYth64OmTGTxQGGLow1t5VCL5qMvcHJA7TY8o
ZvFZX2QeH/iMvFiKxafNdwgvjjh4meLNxb7wWXQ/bCZhUgy8rXTJ51bCoKCHG1s5
7wrbM575XrZ4aVDG2Tp+XY2QQrjdrP3VAHlIuo4a6VFKQNnvv5NcoGNjccx3uuOt
PcCjIKNhSDXcL5QxunqcIjtDJBnqDJazTKhq0OxMw2lHTw8LQlAB0XV/0GlNpIKM
oMF6X6eivhJcjgPLR+TPs7KXKEeqj8N4Iql/hha54ftQ96J3P8fvvdZEAQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFM+2MIJwjxgp9TNBtVdi0iDtaODJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzM1ZWE3
Zi0zYTg3LTRkMmMtODc3Yi0zZmJhMzM0ODBjNjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMzVlYTdm
LTNhODctNGQyYy04NzdiLTNmYmEzMzQ4MGM2Ni8xL3o3WXdnbkNQR0NuMU0wRzFW
MkxTSU8xbzRNay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMy+jANBgkqhkiG9w0BAQsFAAOCAQEACpgt8FN4Sse+
hMddV31p5rn6GwKySRD3HcaS0DvaTchUS5Fztw6dsVh/ABvCuT+69HNt787ygYtj
SxG7KtsV0HHja9hrPtilvVENjPa1Tvcrg3FYQBZY+Ctl42YpTvKkINDBCZVfp74r
rKphFwoXBduZATx3Ar0shjSPflbpsXiCr8DPFAtgBUnwm4ufrClSFym2Bm5aYCAR
FYR0MCfhUbV8c5Txv/EDWekL1QXdpJk6TPO3s7K4nIfKYzcMREZAsychX1DZ3KQF
7rePkn4Ya8kFsCiMXRNqAPmtrt3yPPohnCWhMRu8AgLo4XnX95E6V4LJ6WZCU+QI
J7WcOJJ8HQ==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:38 2025 by rpki-client